Since it was launched back in 2016, WhatsApp Desktop has been one of WhatsApp’s most popular features.
The feature allows you to access WhatsApp on your computer by syncing your phone and your computer.
However, researchers have now discovered a bug in WhatsApp Desktop, that could have allowed hackers to access your private files.
The bug was discovered by security researcher Gal Weizman, and was found to affect users with an iPhone paired to WhatsApp Desktop.
Using JavaScript, Mr Weizman found a gap in WhatsApp’s Content Security Policy, which allowed him to enable bypasses as well as cross site scripting on the Desktop app.
(Image: Getty)
Worryingly, this easily allowed him to access private files from the local file system on the Desktop app.
Meanwhile, the bug could have also allowed hackers to target unsuspecting users with harmful code or links injected into their messages.
Having found the bug, Mr Weizman reported it to WhatsApp, which has now fixed the issue.
Video Loading
Video Unavailable
A spokesperson for WhatsApp said: “We regularly work with leading security researchers to stay ahead of potential threats to our users.
“In this case, we fixed an issue that in theory could have impacted iPhone users that clicked on a malicious link while using WhatsApp on their desktop.
“The bug was promptly fixed and has been applied since mid December.”
No comments:
Post a Comment